Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: OVB4MFLb2vx8KwVrTgtV5zPZMMF3PJycrFQrcAcULfo=
Subject key identifier: 73:61:EC:60:B7:BE:19:5A:17:0D:AF:61:9F:97:2B:E6:5D:0E:F0:38
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 01964AB3EEB119A14E9E6114531EF20CE890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 14FC
Signing time: Fri 18 Apr 2025 21:00:28 +0000
Manifest this update: Fri 18 Apr 2025 21:00:28 +0000
Manifest next update: Sat 19 Apr 2025 21:00:28 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: DXd6Djr0G3MtlAFIkP6P62k1hjSVKW0OFleZ+tiR8gI=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:ee:b1:19:a1:4e:9e:61:14:53:1e:f2:0c:e8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Apr 18 21:00:28 2025 GMT
Not After : Apr 19 21:00:28 2025 GMT
Subject: CN=7361ec60b7be195a170daf619f972be65d0ef038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:bc:7a:dd:b9:be:9e:34:32:cc:61:4d:5e:
7e:60:a9:fc:db:fb:c9:dc:69:6b:d1:54:53:37:45:
34:65:63:25:05:4e:f2:67:75:25:b2:e8:6d:77:1b:
33:c0:cb:f1:b0:06:e8:3f:cf:df:1b:9e:d0:3e:54:
d5:ce:f6:1f:6a:2b:9b:d1:74:6b:ab:d8:0f:9c:31:
6a:97:64:b1:da:10:76:0f:06:50:fa:81:16:2d:e8:
20:72:9b:2a:34:5e:38:bf:00:68:ff:a0:fa:d8:df:
64:7c:76:da:56:a5:3d:e5:74:31:11:1c:03:25:a6:
bd:2c:73:99:4e:d6:cc:fe:13:51:cd:b7:89:84:ac:
88:c5:60:0e:13:fe:49:9d:5b:d9:da:f7:89:dc:64:
bb:bb:5d:4d:f7:32:43:c3:3b:db:f9:d9:2e:0b:50:
66:34:56:70:ae:2d:4a:00:e2:20:37:10:2b:57:d8:
cb:83:dc:f4:3e:84:4a:0a:a1:6a:77:02:c7:e2:c7:
a2:2f:7a:f7:15:f2:20:44:de:3d:66:a6:96:2e:2b:
5e:ff:34:d1:42:34:44:54:8a:fe:25:44:97:44:66:
92:98:be:c9:fb:0d:96:ae:9e:5e:69:12:76:81:f3:
7d:e0:a1:98:86:f1:4f:13:ca:cf:3f:0b:98:46:8c:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:EC:60:B7:BE:19:5A:17:0D:AF:61:9F:97:2B:E6:5D:0E:F0:38
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b2:ec:fc:cb:7a:d3:6b:42:94:38:64:d8:83:05:88:0b:a8:
8c:05:c3:a6:c4:dd:b7:a0:aa:75:cb:11:00:7b:24:48:53:4a:
dc:1b:0c:27:28:e5:b9:76:74:7c:f2:a3:d4:3a:a9:fc:fe:ef:
0b:75:e1:74:43:cf:87:16:d0:82:96:4a:22:6b:21:20:b7:1b:
36:13:66:52:f0:32:9b:43:95:7e:7f:63:30:c6:fa:7e:e7:6d:
29:8c:70:b0:47:35:15:3c:15:86:70:a9:68:fb:fd:64:6c:fb:
78:e6:06:2c:72:f9:d5:69:92:0c:49:08:fc:70:21:33:8e:bd:
1c:f9:72:5f:ef:c7:18:31:e7:ab:9e:18:12:a4:1e:52:81:a7:
58:de:cd:0d:c9:d1:31:8b:5e:eb:30:88:99:a7:41:a5:e4:33:
57:20:e2:f1:2e:93:dc:d7:19:5a:fe:b4:0f:90:53:21:ec:6c:
36:6a:01:c8:a4:d3:23:a8:b2:40:f2:eb:ed:6b:19:4c:3b:92:
d3:49:ae:03:d5:4e:8b:73:d4:ae:87:8c:9c:f9:a8:56:cb:50:
df:12:25:62:5a:fa:b8:d5:de:73:54:64:d0:ec:f7:1e:d5:c6:
ef:39:2b:92:59:3e:b7:08:1a:70:0b:d0:ef:16:1c:bb:9b:af:
38:65:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:43:56 2025 by rpki-client